Disclosed Chromium Security Bugs

V8 Sandbox Bypass: InstantiateAsmJs builtin doesn't protect against mid-builtin dispatch handle swaps

#430960844•Reporter: ma...@popax21.dev
$20,000
10/30/2025

v8_wasm_deopt_fuzzer: Crash in std::__Cr::pair v8::internal::MarkCompactCollector

#433469898•Reporter: 24...@project.gserviceaccount.com
$0
10/30/2025

Security DCHECK failure: length <= impl.length() - offset in 378

#433647419•Reporter: 24...@project.gserviceaccount.com
$0
10/30/2025

openexr:openexr_exrcorecheck_fuzzer: Heap-buffer-overflow in DwaCompressor_uncompress

#447429458•Reporter: 87...@developer.gserviceaccount.com
$0
10/29/2025

openexr:openexr_exrcheck_fuzzer: Heap-buffer-overflow in generic_unpack

#436037111•Reporter: 87...@developer.gserviceaccount.com
$0
10/29/2025

openexr:openexr_exrcheck_fuzzer: Heap-buffer-overflow in generic_unpack

#435779241•Reporter: 87...@developer.gserviceaccount.com
$0
10/29/2025

checkstyle:CheckstyleFuzzer: Security exception in java.base/java.util.ArrayList.forEach

#454824443•Reporter: 87...@developer.gserviceaccount.com
$0
10/29/2025

imagemagick:encoder_heic_fuzzer: Index-out-of-bounds in derive_collocated_motion_vectors

#435346238•Reporter: 87...@developer.gserviceaccount.com
$0
10/29/2025

WebAudio AudioWorklets run V8 with disabled denormalized floats

#382005099•Reporter: ol...@google.com
$0
10/29/2025

V8 correctness failure in sources: 07

#433068894•Reporter: 24...@project.gserviceaccount.com
$0
10/29/2025
Showing 4021-4030 of 13102 bugs
1...402403404...1311